Kiali: disabled automountserviceaccounttoken in the Kiali namespace

chart/templates/kyverno-policies/values.yaml

@@ -703,6 +703,7 @@ policies:
       - kyverno
       - velero
       - neuvector
+      - kiali
       
   update-automountserviceaccounttokens:
     enabled: true
@@ -800,6 +801,9 @@ policies:
         - neuvector-updater-pod-*
         - neuvector-prometheus-exporter-pod-*
         - neuvector-registry-adapter-pod-*
+      - namespace: kiali 
+        pods:
+        - kiali-*
       - namespace: argocd
         pods:
         # application-controller pods interact with secrets, configmaps, events, and Argo CRDs 
@@ -826,6 +830,7 @@ policies:
         # notifications bot pods interact with secrets, configmaps, and CRDs
         # More details in argocd/chart/templates/argocd-notifications/bots/slack/role.yaml
         - argocd-argocd-notifications-controller-*
+
 istio:
   enabled: {{ .Values.istio.enabled }}
 

tests/test-values.yaml

@@ -375,6 +375,13 @@ kyvernoReporter:
           cypress_grafana_url: https://grafana.bigbang.dev
           cypress_prometheus_url: https://prometheus.bigbang.dev
           cypress_check_datasource: 'true'
+        resources:
+          requests:
+            cpu: 2
+            memory: 3Gi
+          limits:
+            cpu: 2
+            memory: 3Gi
 
 kyvernoPolicies:
   values: